Privacy Policy
We are committed to safeguarding your data. This policy details how Syntoric collects, processes, protects, and manages personal information across our platform and integrations.
Effective Date: October 24, 2026 | Version 2.5
Syntoric ("Syntoric", "we", "us", or "our") provides a cloud-grade multi-tenant operations, security, and automation platform. This Privacy Policy outlines our transparent data handling practices for users of our website, cloud console, APIs, and connected third-party integrations (including Meta / Facebook / Instagram developer integrations).
1. Information We Collect
We only collect data necessary to provide and operate the Syntoric platform, manage customer accounts, and deliver requested integrations:
- Account and Profile Information: When you register or sign in, we collect your name, business email address, organization name, and optional avatar URL.
- Authentication & OAuth Data: For single sign-on (SSO) and third-party integrations (such as Meta/Facebook, Google, or GitHub), we store OAuth authorization tokens, token expiry timestamps, and provider user identifiers.
- Social & Publishing Integration Data: When you connect social accounts to publish content or manage social channels, we store authorized Page IDs, account usernames, and user-initiated scheduled posts or media metadata.
- Cloud Operations Telemetry: Anonymized platform performance telemetry, API request logs, and security scan audit records required to maintain reliability and security posture.
2. How We Use Information
We process personal and technical information strictly for legitimate operational purposes:
- To provide, secure, and maintain access to the Syntoric Cloud Platform and services.
- To authenticate user sessions, prevent unauthorized tenant access, and enforce role-based access control (RBAC).
- To execute user-scheduled publishing actions, social media broadcasts, and notification dispatches requested through your workspace.
- To deliver critical transactional notifications, security posture alerts, and essential product updates.
- To detect and remediate infrastructure drift, security vulnerabilities, and platform abuse.
We never sell, rent, monetize, or trade your personal data or third-party platform data to data brokers, advertising networks, or external parties.
3. Meta Platform & Social Data Compliance
In compliance with the Meta Platform Terms and Developer Policies for applications integrating with Facebook, Instagram, and Threads APIs:
- •Limited Scope of Access: We request only the minimal permissions required to deliver requested platform features (such as page post scheduling or engagement monitoring).
- •No Advertising or Surveillance: Meta user data is strictly used to fulfill the user's direct operational commands within the Syntoric console. It is never used for targeting, retargeting, profiling, or cross-site tracking.
- •Secure Token Storage: All OAuth tokens and secrets are encrypted in transit via TLS 1.3 and at rest with AES-256 encryption.
- •User Data Deletion Guarantee: You retain complete ownership and control over your data. You may disconnect your Meta accounts or request total data purging at any time. Review our step-by-step instructions at Syntoric User Data Deletion Policy.
4. Data Retention & Security Measures
We maintain high-standard technical and organizational security controls designed in alignment with SOC 2 Type II and CIS multi-cloud benchmarks:
Encryption Standards
TLS 1.3 encryption across all network ingress points and AES-256 cryptographic encryption for all persistent database volumes and cached data.
Retention Duration
Account information is retained while your subscription is active. Upon account deletion or integration disconnection, data is permanently purged within 30 days.
5. Cookies & Analytics
Our website and console use only the strictly necessary storage below until you choose otherwise. Analytics cookies are optional: they are set only after you accept them, Reject is always as easy as Accept, and you can withdraw at any time, which also deletes them. If your browser sends a Global Privacy Control signal, we treat it as a refusal of optional cookies. We do not sell or share personal information for cross-context behavioral advertising, and analytics runs with advertising features and signals turned off.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| syntoric_consent | Strictly necessary | Remembers your cookie choice so we do not ask on every visit. Shared with the Syntoric console. | 12 months |
| syntoric_refresh | Strictly necessary | Keeps you signed in to the console. Readable only by our sign-in service, never by page scripts, and removed when you sign out. | 30 days |
| syntoric_sso | Strictly necessary | Ties a single sign-on login to the browser that started it, to stop sign-in forgery. | 10 minutes |
| syntoric-theme (local storage) | Strictly necessary | Remembers the light or dark theme you picked. Never leaves your browser. | Until you clear it |
| _ga, _ga_<id> | Analytics (optional) | Google Analytics: counts visits and tool usage. Set only after you accept analytics; removed when you withdraw. | 13 months |
6. Your Rights & Privacy Contact
Under applicable data protection regulations (including GDPR and CCPA/CPRA), you have the right to access, rectify, download, restrict, or erase personal data held by Syntoric.
To exercise any of these rights, or if you have questions regarding this Privacy Policy or our third-party data practices, contact our Data Protection Officer:
Syntoric Data Protection & Privacy Office
Direct inquiries regarding personal data, compliance, and Meta app review verification.